Q1 


Q2 


Q3 


Q4 


We intend to revise the code to address the impact of changes in data protection 
legislation, where these changes are relevant to data sharing. What changes to the 
data protection legislation do you think we should focus on when updating the code? 


The difference between a data sharing agreement and a data processing agreement; the questions or 


sections of a data sharing agreement that are now needed; the legal "gateways" for sharing and how 
these are affected by the new legislation 


Apart from recent changes to data protection legislation, are there other 


developments that are having an impact on your organisation's data sharing practice 
that you would like us to address in the updated code? 


Yes 
go No 


Please specify 


Better guidance on the process of sharing, e.g. using an overarching protocol and 
then sharing agreements below that level; the issue of sharing across multiple 


agencies/data controllers; what is the minimum required for sharing agreement i.e. 
with SME's or individuals, or similar 


Does the 2011 data sharing code of practice strike the right balance between 


recognising the benefits of sharing personal data and the need to protect it? Please 
give details. 


Yes 
0O No 


Q5 In what ways does it achieve this? 


Q6 In what ways does it fail to strike the right balance? 


Q7 What types of data sharing (eg systematic, routine sharing or exceptional, ad hoc 
requests) are covered in too much detail in the 2011 code? 


Systematic and routine 


Q8 What types of data sharing (eg systematic, routine sharing or exceptional, ad hoc 
requests) are not covered in enough detail in the 2011 code? 


Exception and Ad hoc 


Q9 Is the 2011 code relevant to the types of data sharing your organisation is involved 
in? If not, which additional areas should we cover? 


Special category data - the guidance on this needs to be improved 


Q10 Please provide details of any case studies or data sharing scenarios that you would 
like to see included in the updated code? 


We are trying to put together a national agreement, covering some 120 data 


controllers - so would appreciate something of that scale, and at the oppositive end, 
sharing with an individual consultant or very small organisation 


Q11 Is there anything the 2011 code does not cover that you think it should? Please 
provide details. 


Risk to data subjects and how this should be considered in the context of sharing; 


the impact of the DPA2018 Schedules; individual rights and data sharing; a model 
sharing agreement 


Q12 In what other ways do you think the 2011 code could be improved? 


Less focus on retail, and more focus on standard business requirements 


About you 


Q13 Are you answering these questions as: 
O A public sector worker? 
O A private sector worker? 
© A third or voluntary sector worker? 
O A member of the public 
O A representative of a trade association 
O A data subject 
O An ICO employee 


O Other 


Q1i4 Please specify 


Q15 Please provide more information about the type of organisation you work for, ie a 
bank, a housing association, a school. 


The Church of England 


Q16 We may want to contact you about some of the points you have raised. If you are 
happy for us to do this please provide your email address: 


Thank you for taking the time to share your views and experience. 


